https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T05:28:05.114760+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111365 fkie_cve-2026-111365 2026-10-16T05:28:05.115904+00:00

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids. Attackers holding ordinary sys:role permissions can call /admin/sys/role/info, update, or delete with another admin's role id to rewrite menu and department grants, changing other users' effective access.

 https://db.gcve.eu/vuln/ghsa-654q-53gj-v4xg GHSA-654q-53gj-v4xg 2026-10-16T05:28:05.115996+00:00

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids. Attackers holding ordinary sys:role permissions can call /admin/sys/role/info, update, or delete with another admin's role id to rewrite menu and department grants, changing other users' effective access.